summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_biba
Commit message (Expand)AuthorAgeFilesLines
* Adapt MAC policies for the new user API changes; teach policies howrwatson2002-10-222-16/+290
* Introduce mac_biba_copy() and mac_mls_copy(), which conditionallyrwatson2002-10-211-9/+25
* Add compartment support to Biba and MLS policies. The logic of therwatson2002-10-212-16/+68
* Demote sockets to single-label objects rather than maintaining arwatson2002-10-211-16/+0
* Synchonize variable spelling with the MAC tree: we shortened some ofrwatson2002-10-211-9/+8
* Since the Biba and MLS access checks are identical to the open checks,rwatson2002-10-211-12/+1
* Cleanup of relabel authorization checks -- almost identical logic,rwatson2002-10-211-56/+205
* Add a twiddle to create PTY's with a biba/equal or mls/equal labelrwatson2002-10-211-0/+9
* Trim accidentally introduced trailing whitespace.rwatson2002-10-061-1/+1
* Sync from MAC tree: break out the single mmap entry point intorwatson2002-10-061-22/+32
* Modify label allocation semantics for sockets: pass in soalloc's mallocrwatson2002-10-051-2/+2
* Implement mac_create_devfs_symlink() for policies that interact withrwatson2002-10-051-0/+14
* Merge implementation of mpo_check_vnode_link() for various appropriaterwatson2002-10-051-0/+26
* Begin another merge from the TrustedBSD MAC branch:rwatson2002-10-051-205/+58
* Remove another missed trailing space.rwatson2002-09-211-1/+1
* Trim trailing whitespace from the ends of lines.rwatson2002-09-211-13/+13
* Continue cleanup and sync of mac_biba and mac_mls policies to therwatson2002-09-211-13/+0
* Remove mac_biba_high_single() check for interface renaming: we nowrwatson2002-09-211-12/+0
* As INVARIANTS isn't supported for code that loads only as a kernelrwatson2002-09-211-2/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2bde2002-09-101-0/+1
* Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'rwatson2002-09-051-0/+1
* Pass active_cred and file_cred into the MAC framework explicitlyrwatson2002-08-191-12/+12
* Break out mac_check_pipe_op() into component check entry points:rwatson2002-08-191-18/+66
* Break out mac_check_vnode_op() into three seperate checks:rwatson2002-08-191-32/+60
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-151-3/+3
* Introduce support for Mandatory Access Control and extensiblerwatson2002-07-312-0/+2287
OpenPOWER on IntegriCloud